Site Notice

Information pursuant to § 5 TMG

Contact

VAT ID

Sales tax identification number according to § 27 a of the Sales Tax Law:ESX2705048H

We are not willing or obliged to participate in dispute resolution proceedings before a consumer arbitration board.

Liability for Contents

As service providers, we are liable for own contents of these websites according to Sec. 7, paragraph 1 German Telemedia Act (TMG). However, according to Sec. 8 to 10 German Telemedia Act (TMG), service providers are not obligated to permanently monitor submitted or stored information or to search for evidences that indicate illegal activities.

Legal obligations to removing information or to blocking the use of information remain unchallenged. In this case, liability is only possible at the time of knowledge about a specific violation of law. Illegal contents will be removed immediately at the time we get knowledge of them.

Liability for Links

Our offer includes links to external third party websites. We have no influence on the contents of those websites, therefore we cannot guarantee for those contents. Providers or administrators of linked websites are always responsible for their own contents.

The linked websites had been checked for possible violations of law at the time of the establishment of the link. Illegal contents were not detected at the time of the linking. A permanent monitoring of the contents of linked websites cannot be imposed without reasonable indications that there has been a violation of law. Illegal links will be removed immediately at the time we get knowledge of them.

Copyright

Contents and compilations published on these websites by the providers are subject to German copyright laws. Reproduction, editing, distribution as well as the use of any kind outside the scope of the copyright law require a written permission of the author or originator. Downloads and copies of these websites are permitted for private use only.The commercial use of our contents without permission of the originator is prohibited.

Copyright laws of third parties are respected as long as the contents on these websites do not originate from the provider. Contributions of third parties on this site are indicated as such. However, if you notice any violations of copyright law, please inform us. Such contents will be removed immediately.

Privacy Policy

1. An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit our website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

Data recording on our website

Who is the responsible party for the recording of data on this website (i.e. the “controller”)?

The data on this website is processed by the operator of the website, whose contact information is available under section “Information Required by Law” on this website.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance be information you enter into our contact form.

Our IT systems automatically record other data when you visit our website. This data comprises primarily technical information (e.g. web browser, operating system or time the site was accessed). This information is recorded automatically when you access our website.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyse your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified, blocked or eradicated. Please do not hesitate to contact us at any time under the address disclosed in section “Information Required by Law” on this website if you have questions about this or any other data protection related issues. You also have the right to log a complaint with the competent supervising agency.

Moreover, under certain circumstances, you have the right to demand the restriction of the processing of your personal data. For details, please consult the Data Protection Declaration under section “Right to Restriction of Data Processing.”

Analysis tools and tools provided by third parties

There is a possibility that your browsing patterns will be statistically analysed when your visit our website. Such analyses are performed primarily with cookies and with what we refer to as analysis programmes. As a rule, the analyses of your browsing patterns are conducted anonymously; i.e. the browsing patterns cannot be traced back to you. You have the option to object to such analyses or you can prevent their performance by not using certain tools. For detailed information about this, please consult our Data Protection Declaration below.

You do have the option to object to such analyses. We will brief you on the objection options in this Data Protection Declaration.

2. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

We herewith advise you that the transmission of data via the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data processing controller on this website is:

Jan Kohlrusch PHOTOGRAPHYOeynhauser Strasse 514199 Berlin

Phone: +49 30 23403408E-mail: jan@jankohlrusch.com

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g. names, e-mail addresses, etc.).

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. To do so, all you are required to do is sent us an informal notification via e-mail. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

In the event that data are processed on the basis of Art. 6 Sect. 1 lit. e or f GDPR, you have the right to at any time object to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on these provisions. To determine the legal basis, on which any processing of data is based, please consult this Data Protection Declaration. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling protection worthy grounds for the processing of your data, that outweigh your interests, rights and freedoms or if the purpose of the processing is the claiming, exercising or defence of legal entitlements (objection pursuant to Art. 21 Sect. 1 GDPR).

If your personal data is being processed in order to engage in direct advertising, you have the right to at any time object to the processing of your affected personal data for the purposes of such advertising. This also applies to profiling to the extent that it is affiliated with such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection pursuant to Art. 21 Sect. 2 GDPR).

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

Right to data portability

You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

Information about, blockage, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified, blocked or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time at the address provided in section “Information Required by Law.”

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time at the address provided in section “Information Required by Law.” The right to demand restriction of processing applies in the following cases:

In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.

If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data.

If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.

If you have raised an objection pursuant to Art. 21 Sect. 1 GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

3. Recording of data on our website

Cookies

In some instances, our website and its pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. The purpose of cookies is to make our website more user friendly, effective and more secure. Cookies are small text files that are placed on your computer and stored by your browser.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your leave our site. Other cookies will remain archived on your device until you delete them. These cookies enable us to recognise your browser the next time you visit our website.

You can adjust the settings of your browser to make sure that you are notified every time cookies are placed and to enable you to accept cookies only in specific cases or to exclude the acceptance of cookies for specific situations or in general and to activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, the functions of this website may be limited.

Cookies that are required for the performance of the electronic communications transaction or to provide certain functions you want to use (e.g. the shopping cart function), are stored on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error free and optimised provision of the operator’s services. If other cookies (e.g. cookies for the analysis of your browsing patterns) should be stored, they are addressed separately in this Data Protection Declaration.

Server log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:

The type and version of browser used

The used operating system

Referrer URL

The hostname of the accessing computer

The time of the server inquiry

The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent.

The processing of these data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Article 6 (1) a GDPR) and/or on our legitimate interests (Article 6 (1) (f) GDPR), since we have a legitimate interest in the effective processing of requests addressed to us.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

4. Social media

Facebook plug-ins (Like & Share button)

We have integrated plug-ins of the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, on our website. You will be able to recognise Facebook plug-ins by the Facebook logo or the "Like" button on our website. An overview of the Facebook plug-ins is available under the following link: https://developers.facebook.com/docs/plugins/.

Whenever you visit our website and its pages, the plug-in will establish a direct connection between your browser and the Facebook server. As a result, Facebook will receive the information that you have visited our website with your plug-in. However, if you click the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our website and its pages with your Facebook profile. As a result, Facebook will be able to allocate the visit to our website and its pages to your Facebook user account. We have to point out, that we as the provider of the website do not have any knowledge of the transferred data and its use by Facebook. For more detailed information, please consult the Data Privacy Declaration of Facebook at: https://www.facebook.com/privacy/explanation.

If you do not want Facebook to be able to allocate your visit to our website and its pages to your Facebook user account, please log out of your Facebook account while you are on our website.

The use of the Facebook plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media.

Twitter plug-in

We have integrated functions of the social media platform Twitter into our website. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. While you use Twitter and the "Re-Tweet" function, websites you visit are linked to your Twitter account and disclosed to other users. During this process, data are transferred to Twitter as well. We must point out, that we, the providers of the website and its pages do not know anything about the content of the data transferred and the use of this information by Twitter. For more details, please consult Twitter’s Data Privacy Declaration at: https://twitter.com/en/privacy.

The use of Twitter plug-ins is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media.

Instagram plug-in

We have integrated functions of the public media platform Instagram into our website. These functions are being offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you may click the Instagram button to link contents from our website to your Instagram profile. This enables Instagram to allocate your visit to our website to your user account. We have to point out that we as the provider of the website and its pages do not have any knowledge of the content of the data transferred and its use by Instagram.

The use of the Instagram plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media.

Tumblr plug-in

Our website and its pages use buttons of the Tumblr platform. The provider is Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA.

These buttons enable you to share a report or a page on Tumblr or to follow the provider on Tumblr. If you access one of our websites via the Tumblr button, your browser will establish a direct connection with Tumblr’s servers. We do not have any control over the volume of data Tumblr collects and transfers with the assistance of this plug-in. Based on the current status of the information we have the IP address of the user and the URL of the respective website are both transferred.

The use of the Tumblr plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media.

Pinterest plug-in

We use social plug-ins of the social network Pinterest on our website. The network is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA ("Pinterest").

If you access a site or page that contains such a plug-in, your browser will establish a direct connection with Pinterest’s servers. During this process, the plug-in transfers log data to Pinterest’s servers in the United States. The log data may possibly include your IP address, the address of the websites you visited, which also contain Pinterest functions. The information also includes the type and settings of your browser, the data and time of the inquiry, how you use Pinterest and cookies.

The use of the Pinterest plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media.

For more information concerning the purpose, scope and continue processing and use of the data by Pinterest as well as your affiliated rights and options to protect your private information, please consult the data privacy information of Pinterest at: https://about.pinterest.com/en/privacy-policy.

5. Plug-ins and Tools

YouTube

If you visit a page on our website into which a YouTube plug-in has been integrated, a connection with YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited.

Furthermore, YouTube will be able to place various cookies on your device. With the assistance of these cookies, YouTube will be able to obtain information about our website visitor. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud. These cookies will stay on your device until you delete them.

If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.

The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6 Sect. 1 lit. f GDPR, this is a legitimate interest.

Google Web Fonts (local embedding)

This website uses so-called Web Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.

Additional information FORMAT.COM/web host

Privacy Policy

Effective as of May 24, 2018

This is the Privacy Policy of the format.com website (and any successor or other domains that we operate) and all content, services and products, including our mobile applications, that we provide (collectively, the “Application”). The Application is owned and operated by Ideaform Inc. (together with our affiliates and subsidiaries, “Ideaform”, “we”, “us”, “our” and terms of similar meaning). It describes the personal information that we collect from users of our Application as part of the normal operation of our Application, and how we use and disclose this information. Capitalized terms used but not defined in this Privacy Policy have the meanings in our Terms of Service.

In this Privacy Policy, when we refer to “Users”, we mean our customers who use our Services to create their own Portfolios, and when we refer to “End Users” we mean the users, visitors and customers of our Users’ Portfolios.

This Privacy Policy describes what we do with personal information that we collect and use for our own purposes (i.e., where we are a controller), such as User Account information and information about how you use and interact with our Services, including information you submit to our customer support as well as certain information relating to our Users’ End Users.

We host and process Content for our Users, for their own use and for the use of their End Users. Our Users tell us what to do with their Content in relation to the Service, and in accordance with the Agreement and the operation of our Service we follow their instructions. This Privacy Policy does not describe what we do with Content on our Users’ instructions (i.e., as their processor). If you are an End User of one of our Users’ Portfolios and want to know how that User handles your information, you should check its privacy policy. If you want to know about what we do for our own purposes, read on. If you are a User, see ourData Processing Policy to learn more about how we process User Content on your instructions or with your permission.

We use cookies and similar technologies. Our Cookie Policy describes what we do in that regard.

By accepting this Privacy Policy in registration or by using our Services, you expressly consent to our collection, use and disclosure of your personal information in accordance with this Privacy Policy. This Privacy Policy is incorporated into and subject to our Terms of Service.

How We Use Your Information

We use personal information in the file we maintain about you, and other information we obtain from your current and past activities on the Application, to provide to you the services offered by the Application; resolve service disputes; troubleshoot problems; measure consumer interest in our products and services; inform you about online and offline offers, products, services, events and updates; deliver information to you that, in some cases, is relevant to your interests, such as product news; customize your experience; detect and protect us against error, fraud and other criminal activity; enforce our Terms of Service; provide you with system or administrative messages, and as otherwise described to you at the time of collection.

We may also use personal information about you to improve our marketing and promotional efforts, to analyze Application usage, to improve our content and product offerings, and to customize the Application's content, layout, and services. These uses improve the Application and better tailor it to meet your needs, so as to provide you with a smooth, efficient, safe and customized experience while using the Application.

Please see below under “How we Retain your Personal Information” for information on what we do to account information when you terminate your account with us.

What Information Do We Collect?

Our primary purpose in collecting personal information from you is to provide you with a safe, smooth, efficient, and customized experience. This allows us to provide services and features that most likely meet your needs, and to customize our service to make your experience safer and easier. We only collect personal information about you that we consider necessary for achieving this purpose.

In general, you can browse the Application without telling us who you are or revealing any personal information about yourself. Once you become a User, we require you to provide various contact and identity information and other personal information as indicated on the relevant forms on the Application, and you are no longer anonymous to us. Where possible, on these forms we indicate which fields are required and which fields are optional. In addition, as you use the Application, you can from time to time enter or send to us personal information.

You always have the option to not provide information by choosing not to become a User or by not using the particular feature of the Application for which the information is being collected.

We also automatically track certain information about you based upon your behaviour on our Application. We use this information to do internal research on our users' demographics, interests, and behaviour to better understand, protect and serve you and our community. This information may include the URL that you just came from (whether this URL is on our Application or not), which URL you next go to (whether this URL is on our Application or not), your computer browser information, your IP address and your location.

If you are an End User of our Users’ Portfolios, we also get information about your interactions with their Portfolios, though we use this in anonymous, aggregated or pseudonymized form which does not focus on you individually. We use this data to evaluate, provide, protect or improve our Services (including by developing new products and services).

Some of this information is collected automatically using cookies and similar technologies when you use our Services and our Users’ Portfolios. We let our Users control what cookies and similar technologies are used through their Portfolios (except those we need to use to provide the Services properly, such as for performance or security related reasons). You can read more about our use of cookies in our Cookie Policy. Some of this information is similarly collected automatically through your browser or from your device.

We also use Twitter’s Conversion Tracking and Tailored Audiences product - by using the Application you are permitting Twitter to collect non-identifying data for analytics purposes. We use this data to improve upon our services and audience; this anonymous data is only used to understand our user base and to assess features and potential advertising content to enhance the Application experience. At no point in time is your personal information tied to this analytics data by Twitter. More information about how you can opt out of this program, including through the Do Not Track functionality in your web browser, is available here.

If you use a Third Party Service (such as Google) to register for an Account, the Third Party Service may provide us with your Third Party Service account information on your behalf, such as your name and email address (we don’t store passwords you use to access Third Party Services). Your privacy settings on the Third Party Service normally control what they share with us. Make sure you are comfortable with what they share by reviewing their privacy policies and, if necessary, modifying your privacy settings directly on the Third Party Service.

We do not collect or save your credit card information when you use your credit card to subscribe to our Application - when you subscribe to our Application, the payment processors that we use handle all credit card information. However, If you subscribe, we do obtain limited information about your payment card from our payment processors, such as the last four digits, the country of issuance and the expiration date. Currently, our payment processors are Braintree, PayPal and Bambora. Please consult their terms of use and privacy policies for more information about they use your personal information.

Following your registration on the Application, you can review and change your information in your account area. If you disclose personal information on the Application and wish to have it removed, please contact us at the support contact information posted on the Application.

Our Disclosure of Your Information

We will not sell or rent your personally identifiable information to third parties without your explicit consent. The following describes some of the ways that your information may be disclosed in the normal scope of business to provide our services:

Anonymized Aggregated Data. We aggregate and anonymize data and use and disclose such information for a variety of purposes. However, in these situations, we do not disclose any information that could be used to identify you personally.

End Users. We may share with our Users data regarding usage by End Users of their Portfolios. For example, we may provide a User with information about what web page the End User visited before coming to their Portfolios and how their End Users interacted with their Portfolios. This is so Users can analyze the usage of their Portfolios and improve their services.

Public Areas of the Application. All of your activities in the public areas of the Application will be identifiable to your User ID, and other people can see your published content.

Subsidiaries and Affiliates; Service Providers. We may from time to time use the services of affiliates, subsidiaries and unrelated service providers in the operation of the Application, and may disclose personal information to them in the course of our use of their services. For example, we may use the services of third-party hosting companies to host the operation of the Application. This may involve the hosting of data, including personal information, on servers operated by those hosting companies. We also partner with third party publishers, advertising networks and service providers to manage our ads on other sites. Our third party partners may set cookies on your device or browser to gather information about your activities on the Services and other sites you visit, in order to provide you with Ideaform ads. For example, if you visit Ideaform and also use a social media platform, you may see a Ideaform ad in your social media newsfeed or timeline. See our Cookie Policy for more information. We take care to use only service providers that we believe are reputable and able to live up to our and your expectations, including about the handling of confidential information.

Legal Requests; Emergencies; Jurisdictions. We cooperate with law enforcement inquiries and demands for information that are made under force of law. We are also cognizant of the need to address emergencies. Therefore, we may disclose User and End User personal information (a) to any governmental authority as part of an investigation to determine our compliance with any applicable law, rule, or regulation (including privacy laws, rules, and regulations), (b) in response to a court order, subpoena, discovery request, or other lawful judicial or administrative proceeding, (c) as otherwise required under any applicable law, rule, or regulation, and (d) in good faith, to protect or defend our rights or property or those of other users or End Users.

We may also disclose personal information to the acquiror or its agents in the course of the sale of our business. If we do this, the disclosure will be subject to confidentiality arrangements customary in such transactions.

Security

Ideaform Inc. strives to protect your personal information. For security of transactions, we use the Secure Sockets Layer (SSL) protocol, which encrypts any personal information you enter into registration forms on the Application. The encryption process protects your information, by scrambling it before it is sent to us from your computer. We also make commercially reasonable effort to ensure the security of your personal information on our system. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot warrant the security of any information you transmit to us.

How We Retain Your Personal Information

We retain personal information regarding you or your use of the Services for as long as your Account is active or for as long as needed to provide you or our Users with the Services. We also retain personal information for as long as necessary to achieve the purposes described in this Privacy Policy, for example, to comply with our legal obligations, to protect us in the event of disputes and to enforce our agreements and to protect our and others’ interests.

The precise periods for which we keep your personal information vary depending on the nature of the information and why we need it. Factors we consider in determining these periods include the minimum required retention period prescribed by law or recommended as best practice, the period during which a claim can be made with respect to an agreement or other matter, whether the personal information has been aggregated or pseudonymized, and other relevant criteria. For example, the period we keep your email address is connected to how long your Account is active, while the period for which we keep a support message is based on how long has passed since the last submission in the thread.

As Users may come back to us after an Account becomes inactive, we don’t immediately delete your personal information when a trial period expires or you cancel all paid Services. Instead, we keep your personal information for a reasonable period of time, so it will be there for you if you come back.

You may delete your Account by contacting us at privacy@format.com and we will delete the personal information it holds about you (unless we need to retain it for the purposes set out in this Privacy Policy).

Please note that in the course of providing the Services, we collect and maintain aggregated, anonymized or de-personalized information which we may retain indefinitely.

Other Information Collectors

Except as otherwise expressly included in this Privacy Policy, this document only addresses the use and disclosure of information we collect from you. To the extent that you disclose your information to other parties through the Application, including Third Party Services, different rules may apply to their use, collection and disclosure of the personal information you disclose to them. Since we do not control the information use, collection or disclosure policies of third parties, you are subject to their privacy policies. We encourage you to ask questions before you disclose your personal information to others.

End Users’ Personal Information

Users who have created a Portfolio using the Services are responsible for what they do with the personal information they collect, directly or through our Services, about their End Users. This section is directed to our Users concerning their End Users.

Your Relationship with End UsersIf you’re one of our Users, you may collect personal information about your End Users. For example, during an eCommerce checkout you may ask your End Users to provide their name, address, email address and payment information so that you can complete their orders. You may also use cookies and similar technologies to analyze usage and other trends.You're solely responsible for complying with any laws and regulations that apply to your collection and use of your End Users’ information, including personal information you collect about them from us or using our functionality or cookies or similar technologies.You must publish your own privacy and cookie policy and comply with them. We’re not liable for your relationship with your End Users or how you collect and use personal information about them (even if you collect it from us or using our functionality or cookies or similar technologies) and we won’t provide you with any legal advice regarding such matters.

End User Payment InformationYour End Users’ payment information may be processed via third party eCommerce Payment Processors with which you integrate your Account, in accordance with such eCommerce Payment Processors’ terms and policies. We transmit your End Users’ complete payment information when they initially provide or update it only so that we can pass it along to the eCommerce Payment Processors you agree to use. We don’t collect or store your End Users’ payment information except as described above.

Your Rights and Choices

Where applicable law requires (and subject to any relevant exceptions under law), you may have the right to access, update, change or delete personal information.

You can access, update, change or delete personal information (or that of your End Users) either directly in your Account or by contacting us atprivacy@format.com to request the required changes. You can exercise your other rights (including deleting your Account) by contacting us at the same email address.

You can also elect not to receive marketing communications by changing your preferences in your Account or by following the unsubscribe instruction in such communications.

Please note that, for technical reasons, there is likely to be a delay in deleting your personal Information from our systems when you ask us to delete it. We also will retain personal Information in order to comply with the law, protect our and others’ rights, resolve disputes or enforce our legal terms or policies, to the extent permitted under applicable law.

You may have the right to restrict or object to the processing of your personal information or to exercise a right to data portability under applicable law. You also may have the right to lodge a complaint with a competent supervisory authority, subject to applicable law. If you are subject to EU data protection laws, we suggest you lodge any such complaints with our lead supervisory authority:

Additionally, if we rely on consent for the processing of your personal information, you have the right to withdraw it at any time and free of charge. When you do so, this will not affect the lawfulness of the processing before your consent withdrawal.

Our Cookie Policy explains how you can manage cookies and similar technologies.

If you are an End User of one of our Users’ Portfolios, you should contact them to exercise your rights with respect to any information they hold about you.

Data Transfers

Personal information that you submit through the Services may be transferred to countries other than where you live, such as, for example, to servers in the United States. We also store personal information locally on the devices you use to access the Services.

Your personal information may be transferred to countries that do not have the same data protection laws as the country in which you initially provided the information.

In such cases, we continue to protect the information with appropriate safeguards, but it may be subject to the legal jurisdiction of those countries and governmental authorities in those countries.

STRATO.COM 7/ web host

Privacy Policy, Version 4.0

The protection of your data is one of the most important principles of Strato AG. With this privacy policy, we would like to inform you about the type, scope and purpose of the personal data collected, used and processed by us. Furthermore, we would like to inform you about your rights.

a) Contract dataWe collect, process and store the data you provide when you order from us. In addition, we store and process data about the order and payment history.

b) Data that you store on our serversWe collect, process and store the information you store yourself when you use our services. This includes the production of backup copies in our backup systems.

c) Log dataWhen you visit our website or use our services, the device that you use to access the page automatically transmits log data (connection data) to our servers. Log data includes the IP address of the device that you use to access the website or service, the type of browser you are using, the website you have visited beforehand, your system configuration, and the date and time. We store IP addresses only to the extent necessary to provide our services. Otherwise, the IP addresses are deleted or made anonymous. We store your IP address when visiting our website for a maximum of 7 days to detect and ward off attacks.

d) CookiesWe use cookies in various areas on our website.Cookies are small identifiers that a server stores on the device that you use to access our website or our services. They contain information that can be retrieved when accessing our services, allowing for more efficient and better use of our services.We use permanent and session cookies. Session cookies are deleted when you close your web browser. Permanent cookies remain on your device until they are no longer needed to achieve their purpose and are deleted.

The cookies serve to improve our services and the use of certain features. In addition, cookies are also used, among other things, to collect statistical information about our website, for example about the number of visitors.

You can prevent the creation of cookies at any time by means of an appropriate setting of your Internet browser used and thus permanently object the creation of cookies. Furthermore, cookies that have already been created can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If you deactivate the creation of cookies in the Internet browser you are using, not all functions of our website may be fully usable.

Pixel are small graphics on web pages that enable log file recording and log file analysis, which are often used for statistical evaluations.We use the following tracking and analysis tools:

Google Analytics: The operating company of the Google Analytics component is Google Inc.The purpose is to analyse the flow of visitors on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website in order to compile online reports for us. Google Analytics creates a cookie in your browser. By using this cookie, Google is enabled to analyse the use of our website. Each time you access a web page that has a Google Analytics component integrated into it, the web browser is automatically prompted to submit data to Google. No personal data will be transmitted to Google here. The IP address we collect will be forwarded to Google only after the data is made anonymous.It is possible to object to the collection and processing of this data by Google. To do so, you will need to download and install a browser add-on at https://tools.google.com/dlpage/gaoptout?hl=enAdditional information and Google's privacy policy can be found at https://policies.google.com/privacy?hl=en&gl=de and http://www.google.com/analytics/terms/gb.html Google Analytics is explained in more detail at https://www.google.com/intl/en_uk/analytics/#?modal_active=none

Matomo: While using the STRATO website, a unique web analysis cookie is created in your browser in order to collect and analyze various statistical data.[checkbox] If this box is checked, your current visit will be recorded by the Matomo web analysis. Deselect it so that your visit is no longer recorded.

Econda: The operating company of econda is econda GmbH. Econda creates a cookie in your internet browser. Each time you visit one of the individual pages of this website, your Internet browser sends data to econda for marketing and optimization purposes. The user profiles obtained in this way serve to analyse the behaviour of visitors to our website and are evaluated with the aim of improving and optimising the website. This data is not combined with personal data or with other data containing the same pseudonym.It is possible to object to the collection and processing of data (opposition econda).econda's current privacy policy can be found at https://www.econda.de/en/data-protection

Facebook: In order to enable user group controlled marketing in social networks, a tracking pixel of the social media service Facebook Inc. is integrated on this website. When you visit our website, the pixel is loaded from your web browser. Thereby information is sent to Facebook. This concerns, among other things, the information whether Facebook cookies are set in your browser. This information is used to assign the browser session to a person. This assignment is pseudonymised based on a Facebook ID only, so that no personal reference is possible for us.It is possible to object behavior-based advertising at http://optout.aboutads.info/?c=2#!/If you check this box, an opt-out cookie will be set in your browser.You can make additional settings for advertising on Facebook in your user profile.

Google Adwords: The operating company of the services of Google AdWords is Google Inc.If you reach our website via a Google advert, a conversion cookie will be stored on your browser by Google. A conversion cookie expires after thirty days and is not used for identification. If the conversion cookie has not yet expired, it is used to track whether certain sub-pages have been visited on our website. The conversion cookie allows both us and Google to understand if our visitors came to our website through an AdWords ad and generated revenue. The data and information collected through the use of the conversion cookie will be used to determine the success or failure of the respective AdWords ad and to help us optimize our AdWords ads for the future. Neither we nor any other Google AdWords advertiser receives any information from Google that could be used to identify our site visitors. No personal data will be transmitted to Google. The IP address we collect will be forwarded to Google only after the data is made anonymous.You may opt out of Google interest-based advertising. To do this, use the link https://support.google.com/ads/answer/2662922?hl=en and choose the settings you want. Additional information and Google's applicable privacy policy can be found at https://policies.google.com/privacy?hl=en&gl=de

Google Remarketing: Google Remarketing is a feature of Google AdWords. The integration of Google Remarketing allows a company to create user-based advertising and display interest-based ads to the Internet user. The operating company of the services of Google Remarketing is Google Inc.Google Remarketing creates a cookie in your Internet browser. By creating the cookie, Google will be able to recognise the visitor of our website if he subsequently accesses websites that are also members of the Google advertising network. With every visit to a website on which the Google Remarketing service has been integrated, the Internet browser automatically identifies itself to Google. No personal data will be transmitted to Google here. The IP address we collect will be forwarded to Google only after the data is made anonymous. You may opt out of Google interest-based advertising. To do this, use the link https://support.google.com/ads/answer/2662922?hl=en and choose the settings you want.Additional information and Google's applicable privacy policy can be found at https://policies.google.com/privacy?hl=en&gl=de

3. Legal basis of the processing

We process and use your data to execute the contract and provide our services, to improve our services and our websites and to adapt them to your needs and to provide updates and upgrades.

Article 6 I lit. a of the General Data Protection Regulation (GDPR) provides us with a legal basis for processing operations, in which we obtain consent for a particular processing purpose. If the processing of personal data is required to fulfil a contract, the processing is based on Article 6 I lit. b GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of enquiries regarding our products or services. If we are subject to a legal obligation which requires the processing of personal data, such as the fulfilment of tax obligations, the processing is based on Article 6 I lit. c GDPR. Finally, processing operations could be based on Article 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary for the protection of our legitimate interests or those of a third party, unless the interests, fundamental rights and fundamental freedoms of the person concerned (data subject) prevail. Such processing operations are particularly permitted because they have been specifically mentioned by the European legislator. A legitimate interest is usually to be assumed if the data subject is a customer of the controller.

If the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest is conducting our business.

We process applicant data in accordance with Article 88 GDPR in conjunction with § 26 of the Federal Data Protection Act (BDSG, new version).

Escrow services: All registrars accredited by the Internet Corporation for Assigned Names and Numbers (ICANN) must, in accordance with ICANN's generic domain rules, hold the domain data they manage in a secure environment in trust. This is intended to ensure the reliable management of the namespace. To that end, we use the escrow services of DENIC eG, Kaiserstraße 75-77, 60329 Frankfurt am Main.Processors: We pass on various personal data to our processors as the controller within the scope of the processing. We have ensured the security of your data by concluding data processing agreements. Our processors can be divided into the following categories:

Provision of services: These include newsletter delivery, printing and shipping of invoices, customer surveys, payment service providers, data carrier destruction

Operation of services, maintenance and upkeep of hardware and software

We only release data to authorities and third parties in accordance with statutory provisions or a legal title. Information may be provided to authorities on the basis of a legal regulation on security or for prosecution purposes. Third parties will only receive information if required by law. This may be the case, for example, in the case of a copyright infringement.

5. Data transmission to third countries

Registries: To register top level domains. In this case, the data is transmitted on the basis of Article 49 (1) lit. b GDPR.

6. Duration of storage

We only process and store personal data for the period required to achieve the purpose of storage or where required by law. As a rule, the processing purpose is achieved upon termination of your contract.

You can change and delete data that you save in our services yourself. After the termination of contract, we will delete the data stored in the services.

Backup copies in our backup systems are automatically deleted with a time delay.

For contract data, processing will be restricted after the contract has been terminated; it will be deleted after expiry of the statutory retention period.

7. Your rights

a) Right to information and confirmationYou have the right to receive free information from us at any time, as well as confirmation of your personal data stored and a copy of this information.

b) Right to rectificationYou have the right to demand the immediate correction of incorrect personal data concerning you. You also have the right to request the completion of incomplete personal data, including by means of a supplementary statement, taking into account the purposes of processing.

c) Rights to erasureYou have the right to have your personal data erased without delay if any of the following is true and if processing is not required:

The personal data has been collected for such purposes or processed in a way for which it is no longer necessary.

You revoke your consent, on which the processing was based, and any other legal basis for processing is lacking.

You object to the processing in accordance with Article 21 (1) GDPR and there are no legitimate reasons for the processing, or you object to the processing in accordance with Article 21 (2) GDPR.

The personal data has been processed unlawfully.

The erasure of personal data is required to fulfil a legal obligation under European Union law or a national law to which we are subject.

d) Right to restriction of processingYou have the right to request the restriction of processing if one of the following conditions is met:

The accuracy of your personal information is contested by you for a period of time that allows us to verify the accuracy of your personal information.

The processing is unlawful, you refuse the deletion of the personal data and instead require the restriction of the use of personal data.

We no longer need your personal information for processing purposes, but you need it to assert, exercise or defend your rights.

You have objected to the processing in accordance with Article 21 (1) GDPR and it is not yet clear whether our legitimate interests prevail over yours.

e) Rights to objectYou have the right to object at any time to the processing of personal data concerning you, which takes place on the basis of Article 6 (1) lit. e or f GDPR.

In the event of an objection, we will no longer process personal data unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

You have the right to object at any time to the processing of your personal data for the purpose of direct advertising.

f) Right to data portabilityYou have the right to receive personal data relating to you that has been provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance by us if the processing is based on the consent pursuant to Article 6 (1) lit. a GDPR or Article 9 (2) lit. a GDPR or is based on a contract pursuant to Article 6 (1) lit. b GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, in exercising your right to data transferability under Article 20 (1) GDPR, you have the right to arrange that your personal data is transmitted directly from one controller to another, where this is technically feasible and as long as this does not affect the rights and freedoms of others.

g) Right to withdraw consent under data protection law

You have the right to withdraw the consent to the processing of personal data at any time.

h) Right of appeal to the supervisory authorityYou have the right to contact a supervisory authority in the Member State of your place of residence or place of work or the location of the alleged violation at any time if you believe that the processing of personal data concerning you is contrary to the EU General Data Protection Regulation.

8. Statutory or contractual requirement, for the provision of personal data, necessity for the conclusion of the contract, obligation to provide the personal data, possible consequences of failure to provide data

The provision of personal data may in part be required by law (e.g. tax regulations) or result from contractual provisions (e.g. information about the contracting party). Sometimes it may be necessary that you provide us with personal data, which must subsequently be processed by us, in order to conclude a contract. For example, you are required to provide us with personal information when we conclude a contract with you. Failure to provide the personal data would mean that the contract could not be concluded.